This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/0-VSXxZUPNE_NCyRYY4aOknsIgM.roa
File:                     0-VSXxZUPNE_NCyRYY4aOknsIgM.roa (raw, json)
Hash identifier:          p3ie/xFXWDV8klzQ/kVNpHbbrPevYLWLmd0IwEUgv1A=
Subject key identifier:   D3:E5:52:5F:16:54:3C:D1:3F:34:2C:91:61:8E:1A:3A:49:EC:22:03
Certificate issuer:       /CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Certificate serial:       019B79ED0F9BC6E953E4D71A742ADC43ABCF
Authority key identifier: 69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/0-VSXxZUPNE_NCyRYY4aOknsIgM.roa
Signing time:             Thu 01 Jan 2026 14:18:57 +0000
ROA not before:           Thu 01 Jan 2026 14:18:57 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     34611
IP address blocks:        185.242.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ed:0f:9b:c6:e9:53:e4:d7:1a:74:2a:dc:43:ab:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
        Validity
            Not Before: Jan  1 14:18:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d3e5525f16543cd13f342c91618e1a3a49ec2203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:1d:1a:e5:5e:b6:4e:ed:a0:3a:85:15:1c:78:
                    f3:75:7d:24:a3:54:7f:e1:4f:e5:98:b2:c5:b4:47:
                    f8:06:f1:fb:f6:3c:ea:20:27:6c:6a:65:ef:f9:7f:
                    3e:b5:7d:e7:55:14:fd:8e:dc:02:91:d7:0c:df:3c:
                    fc:17:57:1f:df:cf:a3:9f:46:5f:23:a4:af:9b:69:
                    ef:01:8d:7d:65:d6:91:95:65:2a:1b:87:9f:27:9b:
                    d3:b7:53:3f:3e:e7:b0:ab:b9:32:a2:a5:9c:b3:fe:
                    6e:4d:c2:bb:17:d6:5c:b3:7a:e7:fe:2a:87:7e:9e:
                    68:86:84:81:81:7f:9d:ff:56:23:27:40:74:86:df:
                    86:c0:3b:e1:42:6b:46:22:27:68:2f:d3:f3:fa:f5:
                    4f:68:2a:ef:6c:a5:ee:f1:9f:d4:8e:88:7b:47:d4:
                    cc:74:d0:af:a0:ff:6e:ec:72:b3:11:f9:d4:69:5b:
                    d7:ef:9b:3d:1c:15:0c:05:f2:34:88:32:b2:a5:74:
                    0e:3d:26:9c:bd:c3:2c:bf:66:4f:47:2a:79:c5:20:
                    7e:2c:15:da:a1:21:35:05:08:a9:02:9e:2b:6e:d3:
                    f6:dc:4e:97:ca:d1:6a:a0:46:53:43:e9:6b:4c:3e:
                    83:d2:0e:94:84:20:66:00:35:53:6f:e7:e0:85:4a:
                    05:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:E5:52:5F:16:54:3C:D1:3F:34:2C:91:61:8E:1A:3A:49:EC:22:03
            X509v3 Authority Key Identifier:
                keyid:69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/0-VSXxZUPNE_NCyRYY4aOknsIgM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.242.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:b7:62:03:d8:34:67:18:f1:80:6a:8b:a3:a3:5d:3a:be:59:
         6e:5f:17:a6:88:00:48:59:d6:c3:8a:97:1c:8d:b6:8b:ae:93:
         75:4f:5c:9e:52:4a:2b:ba:2d:13:7a:6f:e2:85:2c:eb:2e:70:
         c9:d6:bc:c6:62:0d:1b:2c:1a:19:0b:50:8b:0f:65:1c:87:55:
         12:b1:71:ea:7e:a9:e7:ba:63:49:fe:47:02:96:a6:ee:44:9e:
         7f:9f:e4:61:26:f2:ec:34:0d:01:06:79:ed:95:d1:97:0a:09:
         5b:98:76:e7:4d:b2:6a:ba:d6:67:0a:27:15:13:e4:b4:05:ad:
         d5:6e:18:42:7a:29:ac:03:05:fd:d8:f5:d3:e4:1b:3c:9a:b0:
         df:79:b2:9e:a9:97:00:c9:67:85:44:2d:6d:90:2a:d3:87:fa:
         18:c7:ef:c2:5e:db:2c:07:93:90:7f:f7:3c:99:43:3f:14:f4:
         11:7d:c3:10:94:dc:c7:5f:65:42:d4:96:2f:3c:bd:82:36:23:
         43:94:16:b4:de:8b:0e:4e:22:9e:86:e8:99:07:74:b5:a3:aa:
         44:17:25:99:ae:55:54:b5:a7:3e:4d:d9:6e:22:90:8c:33:26:
         1b:fb:38:da:ba:7d:87:98:fe:ea:eb:ab:74:1a:0c:68:69:35:
         46:31:e1:46
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt57Q+bxulT5NcadCrcQ6vPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NjIyYTFhYWRmNzllNzExZDFlN2U0MzE5ZjczMmMwYjJk
YTgwMWUwHhcNMjYwMTAxMTQxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkM2U1NTI1ZjE2NTQzY2QxM2YzNDJjOTE2MThlMWEzYTQ5ZWMyMjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5R0a5V62Tu2gOoUVHHjzdX0ko1R/
4U/lmLLFtEf4BvH79jzqICdsamXv+X8+tX3nVRT9jtwCkdcM3zz8F1cf38+jn0Zf
I6Svm2nvAY19ZdaRlWUqG4efJ5vTt1M/Puewq7kyoqWcs/5uTcK7F9Zcs3rn/iqH
fp5ohoSBgX+d/1YjJ0B0ht+GwDvhQmtGIidoL9Pz+vVPaCrvbKXu8Z/Ujoh7R9TM
dNCvoP9u7HKzEfnUaVvX75s9HBUMBfI0iDKypXQOPSacvcMsv2ZPRyp5xSB+LBXa
oSE1BQipAp4rbtP23E6XytFqoEZTQ+lrTD6D0g6UhCBmADVTb+fghUoFMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNPlUl8WVDzRPzQskWGOGjpJ7CIDMB8GA1UdIwQY
MBaAFGliKhqt955xHR5+Qxn3MsCy2oAeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVdJcUdxMzNubkVkSG41REdmY3l3TExhZ0I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MTc2MTUtZDIwMi00OGYyLWJiOTMt
Y2MyMGY0MTcyY2VkLzEvMC1WU1h4WlVQTkVfTkN5UllZNGFPa25zSWdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC83MTc2MTUtZDIwMi00OGYyLWJiOTMtY2MyMGY0MTcyY2Vk
LzEvYVdJcUdxMzNubkVkSG41REdmY3l3TExhZ0I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufIsMA0G
CSqGSIb3DQEBCwUAA4IBAQATt2ID2DRnGPGAaoujo106vlluXxemiABIWdbDipcc
jbaLrpN1T1yeUkorui0Tem/ihSzrLnDJ1rzGYg0bLBoZC1CLD2Uch1USsXHqfqnn
umNJ/kcClqbuRJ5/n+RhJvLsNA0BBnntldGXCglbmHbnTbJqutZnCicVE+S0Ba3V
bhhCeimsAwX92PXT5Bs8mrDfebKeqZcAyWeFRC1tkCrTh/oYx+/CXtssB5OQf/c8
mUM/FPQRfcMQlNzHX2VC1JYvPL2CNiNDlBa03osOTiKehuiZB3S1o6pEFyWZrlVU
tac+TdluIpCMMyYb+zjaun2HmP7q66t0GgxoaTVGMeFG
-----END CERTIFICATE-----
Generated at Tue Feb 10 03:10:56 2026 by rpki-client